Solon Framework Auto-Tunes Thread Pools at Runtime Using CPU Core Count

Solon, a Java application framework, sets its HTTP server thread-pool properties to zero by default, meaning the system automatically calculates optimal values based on the host machine's actual CPU core count at runtime. The auto-tuner uses a single key flag, server.http.ioBound, to determine whether a workload is IO-bound or CPU-bound, then applies different scaling formulas accordingly. For IO-bound services, maxThreads is set to 32 times the core thread count, while CPU-bound services use a leaner multiplier of 8 to avoid unnecessary context-switching overhead. This approach eliminates the common problem of hard-coded or copy-pasted thread-pool values that may have been tuned for a different server environment. Developers can still override individual settings in app.yml, but the zero-config defaults are designed to remain suitable for most deployments without manual intervention.

GitPython CVE-2026-67324: One-character shorthand bypasses remote code execution guard

A critical vulnerability in GitPython, tracked as CVE-2026-67324 and scored 9.8 on CVSS 3.1, allows attackers to bypass the library's built-in guard against dangerous git options. The flaw affects version 3.1.50, where the security check blocks the long-form flag --upload-pack but fails to catch its short-form equivalent -u, enabling arbitrary command execution even when allow_unsafe_options is set to False. Exploitation requires that user-influenced input reaches the multi_options parameter of Repo.clone_from, a scenario common in CI pipelines, web forms, and tools that accept repository URLs or build parameters. GitPython is downloaded roughly 254 million times monthly on PyPI, arriving as a dependency of widely used tools such as MLflow, DVC, and Semgrep, significantly broadening the attack surface. Version 3.1.51 patches the issue, and this is reportedly the third bypass of the same security barrier within a single year, all sharing the same root cause.

Oil Tanker Threats in Middle East Reach Highest Level Since Iran-Iraq War

Analysts warn that oil tankers in the Middle East are now facing their most dangerous operating environment since the start of the Iran-Iraq war. Recent attacks on alternative shipping routes have significantly complicated navigation options for vessels in the region. The escalating threat has left tankers with fewer safe passage choices as multiple routes come under pressure. Experts describe the situation as increasingly complex, reflecting a sharp deterioration in maritime security across the area.

Alibaba Launches Qwen3.8-Max, a 2.4T-Parameter AI to Rival OpenAI and Anthropic

Alibaba on Monday unveiled Qwen3.8-Max, its largest artificial intelligence model to date, targeting enterprise use cases such as software engineering and complex reasoning. The model uses a mixture-of-experts architecture with 2.4 trillion total parameters, though only around 95 billion are activated per inference cycle, balancing performance with speed and cost efficiency. Open-weight versions are set to be released publicly via Alibaba's cloud studio platform the following week. Internal benchmarks shared by the company suggest Qwen3.8-Max performs competitively against leading models from OpenAI and Anthropic on coding evaluations such as SWE-bench Pro. Alibaba also claimed the model autonomously completed three coding projects without human input, with one project running continuously for 16 days from an empty folder to a finished software product.

Supreme Court Issues Language Guidelines for Judges in Rape Trials

India's Supreme Court has released guidelines directing judges to use sensitive and neutral language during rape trials. The court emphasized that terms like 'lost chastity' or 'helpless woman' must be avoided, as such language undermines fairness and victim dignity. Judges have been instructed to refrain from asking stereotypical or victim-blaming questions during proceedings. The court also ruled that rape survivors should not be compelled to interact with the accused at any stage of the trial.

Trump calls Iran leaders 'duplicitous' over talks

AI Lets Anyone Build Apps, But Skipping Human Review Still Costs Dearly

A growing trend celebrates solo developers building apps over a weekend using AI tools, with no engineering team or formal background. However, critics argue that the absence of structured review processes — code reviews, QA testing, and managerial sign-off — leads to silent but consequential failures. Historical examples reinforce this: JPMorgan Chase's 2012 London Whale trading loss, partly traced to an unchecked spreadsheet formula error, cost the bank $6.2 billion. Similarly, a widely cited 2010 economic paper by Reinhart and Rogoff shaped years of government austerity policy before a graduate student discovered a formula error in 2013 that significantly altered its conclusions. The core argument is that review failures, not tool failures, are the recurring culprit — and AI-assisted development does not change that fundamental human blind-spot problem.

Women's Asia Cup likely to be held in UAE from late August to mid-September

The Women's Asia Cup is expected to be hosted in the United Arab Emirates, though the Asian Cricket Council has not yet made a formal announcement. The eight-team tournament is tentatively scheduled to run from August 28 to September 13. The event's venue shift is being considered amid ongoing regional uncertainties. An official confirmation from the ACC regarding the host nation and schedule is still awaited.

Black boxes in PDFs often hide text rather than delete it, experts warn

A common redaction mistake involves drawing a black rectangle over sensitive text in a PDF instead of actually removing the underlying data. Because both methods look identical on screen, the error frequently goes undetected before documents are filed in court or released under FOIA requests. The text remains fully extractable using basic tools such as pdftotext, which will display the supposedly hidden content in plain form. The flaw stems from how PDF content streams work: if the text operator appears before the fill rectangle operator, the name is painted first and then covered, leaving it intact in the file. Proper redaction requires using a dedicated redaction tool and explicitly applying the marks so the text is permanently removed, not merely obscured.

Russian Anti-War Politician Boris Nadezhdin Flees to France After Foreign Agent Label

Russian anti-war politician Boris Nadezhdin has announced that he has left Russia and is now abroad. He shared a video of himself standing in front of the Eiffel Tower in Paris, confirming his departure. Nadezhdin had recently been designated a foreign agent by Russian authorities, a label widely used to restrict and discredit critics of the Kremlin. The foreign agent status carries significant legal and social restrictions in Russia, making public and political activity increasingly difficult. His exit marks the latest instance of a Russian opposition figure leaving the country amid growing pressure on dissenting voices.

Parliament IT Panel Chief Flags Algorithm Role in Rise of Certain Groups

The parliamentary standing committee on IT, which oversees technology and digital platforms, has raised concerns about the role of algorithms in amplifying certain groups online. The panel's chief highlighted that algorithms used by Meta and other social media platforms may be contributing to the disproportionate visibility of some groups. The committee was described as non-partisan, with all members reportedly in agreement on the issues discussed. The concerns were directed at major social media companies, including Meta, regarding their platform mechanics and content amplification practices.

Nvidia CEO: AI Data Center Boom to Create Six-Figure Jobs for Tradespeople

Nvidia CEO Jensen Huang has predicted a strong job market ahead for skilled tradespeople such as electricians and construction workers. The rapid global expansion of AI data centers is driving large-scale infrastructure development, fueling demand for these workers. Huang specifically highlighted electricians as being in particularly high demand for building AI facilities. Other technology leaders have echoed similar concerns, warning of potential labor shortages in manufacturing and construction sectors. The growth is expected to generate numerous six-figure salaries for qualified trade professionals.

Codename One Adds Native-Free Text Editing Path for Lightweight UI Components

Pull request #5386 introduces a pure Codename One text-editing mode, allowing EditField, RichTextArea, and CodeEditor to handle documents, selection, and rendering entirely within the lightweight UI layer. Previously, Codename One relied on a native platform overlay placed over components during editing, which caused minor visual glitches and blocked features like syntax highlighting, rich formatting, and custom selection models. The new TextInputClient contract defines operations such as committing text, managing marked composition ranges, handling virtual-keyboard deletions, and responding to navigation or clipboard commands. A new EditField component serves as the opt-in plain-text field for developers who want editing and painting to remain inside Codename One, while existing TextField and TextArea components are unchanged. The update also enhances clipboard support through a ClipboardContent API that allows multiple MIME-type representations, including plain text, HTML, Markdown, RTF, and image formats, with backward compatibility for existing plain-text clipboard code.

India hikes windfall tax on petrol, diesel and aviation fuel exports from Aug 3

The Indian government has raised export duties on petrol, diesel, and aviation turbine fuel, with the revised rates taking effect from August 3. The new rates will remain in place for a fortnight, as is standard practice for windfall tax revisions. Domestic fuel duties have been left unchanged, ensuring price stability for local consumers. The move comes shortly after a reduction in commercial LPG prices earlier in August. Authorities are also monitoring the potential impact of ongoing global conflicts on India's fuel supply chains.

How to Write an AGENTS.md File That Actually Guides AI Coding Agents

A developer working within the OpenClaw workspace found that effective AI agent behavior stemmed not from a single prompt but from a structured stack of Markdown instruction files, with AGENTS.md at the root. The AGENTS.md format, now part of the Agentic AI Foundation ecosystem under the Linux Foundation, gives developers a plain-text way to tell coding agents how to operate within a repository. The author recommends that a well-written AGENTS.md establish a clear boot order — specifying which files an agent should read before touching any code — to replace aimless searching with deliberate orientation. Judgment-based working principles, such as preferring local helpers over new dependencies, should be kept separate from frequently changing mechanics like build commands to prevent the file from becoming disorganized. Concrete boundary rules, for example using 'trash' instead of 'rm' for file deletion, are highlighted as especially valuable because they give agents specific, actionable limits rather than vague cautions.

Amazon Joins $3 Trillion Club on Strong Cloud Growth and AI Momentum

Amazon's market capitalization crossed the $3 trillion mark following a significant surge in its stock price. Shares of the Seattle-based company climbed 15% after it reported its fastest cloud revenue growth in more than four years. The strong performance was driven by rising demand for artificial intelligence and cloud services. Amazon also raised its annual capital expenditure forecast, signaling confidence in continued infrastructure investment.

Pakistan to appoint Michael Smith as batting coach across all formats

Pakistan cricket is set to bring in Michael Smith as their new batting coach. He is expected to take charge across both red-ball and white-ball formats of the game. The appointment signals Pakistan's intent to strengthen their batting coaching setup. Further details regarding the official confirmation and start date are yet to be announced.

Developer builds ferctl top to show Kubernetes pod resource usage against limits

A developer has published a tutorial detailing how to build 'ferctl top', a command-line tool that displays Kubernetes pod CPU and memory usage alongside their configured requests and limits. The tool addresses a gap in the standard 'kubectl top' command, which shows raw usage figures but does not indicate how close a pod is to its resource limits. Built using Go, Cobra, client-go, and the metrics-server API, ferctl top assigns a status label such as 'CRITICAL' when a pod nears its limit threshold. The project is part of an ongoing Platform Engineering with Go series and builds on patterns introduced in earlier posts covering CLI structure and cluster health reporting. Source code for the completed tool is available in a public repository for developers running minikube with metrics-server enabled.

Settings Failures Now Warn Users Instead of Breaking Deployments

A new design philosophy ensures that non-critical settings errors no longer cause successful deployments to fail. When a settings tweak encounters an issue, the deployment proceeds but the affected item is flagged with a 'public: false' status in the API response. Users are also shown a visible warning in the interface, alerting them to the problem without disrupting the deployment. This approach prevents users from unknowingly receiving broken links while maintaining deployment reliability. The change prioritizes transparency over silent failure, surfacing issues clearly rather than hiding them.

Zuckerberg must apologise for blocking PM Modi’s video, says MPs’ panel chief